eb5e60be84618f51839a61e70bfefe529398b17cfeeb824e2dfc9ca334063aa9 | Triage

Sharing

General

Target

eb5e60be84618f51839a61e70bfefe529398b17cfeeb824e2dfc9ca334063aa9
Size

313KB
Sample

221127-mgvwsaab74
MD5

236d7a95f4f81586d58453d1c1941fdd
SHA1

b03b389df52a49e36643e23303f33769f5c4827e
SHA256

eb5e60be84618f51839a61e70bfefe529398b17cfeeb824e2dfc9ca334063aa9
SHA512

c32461ca18f34d8d5e154de640d5ee68659457655fc23cb0f275aafed8c09cf17a3657e510c0a2587cdf6613a4c071562a9a2039670028bb39372201caa040e6
SSDEEP

6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LA:Hryu6/eIo4vMResyEf0uP9d9UG0A

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eb5e60be84618f51839a61e70bfefe529398b17cfeeb824e2dfc9ca334063aa9
- Size
  
  313KB
- MD5
  
  236d7a95f4f81586d58453d1c1941fdd
- SHA1
  
  b03b389df52a49e36643e23303f33769f5c4827e
- SHA256
  
  eb5e60be84618f51839a61e70bfefe529398b17cfeeb824e2dfc9ca334063aa9
- SHA512
  
  c32461ca18f34d8d5e154de640d5ee68659457655fc23cb0f275aafed8c09cf17a3657e510c0a2587cdf6613a4c071562a9a2039670028bb39372201caa040e6
- SSDEEP
  
  6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LA:Hryu6/eIo4vMResyEf0uP9d9UG0A
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2